Security defaults

[Cantor, Scott]

On 5/20/14, 5:24 AM, "Brent Putman" <putmanb at georgetown.edu> wrote:
>
>While we're on the topic:  I tried to find in the wiki some definitive
>docs for the SP on: 1) what algorithms are blacklist be default 2) what
>algorithms are effectively supported by various versions of the SP.  But
>I didn't see anything.  Do they exist and
> can you point me?

I don't recall documenting it, and it's now not really expressed in the
configuration, it's usually a library default.

The list is just MD5, RSA-MD5, and PKCS 1.5.

>  For #2 I did see some dicussion about what is supported by various RHEL
>OpenSSL versions, but that's only relevant if the platform lib is in use
>- don't we ship our own?  Or is that only on Windows?

Only Windows, and in practice that's the boundary condition, but really
it's the Santuario version plus the OpenSSL version.

Roughly speaking:

SHA-2 in any form 	OpenSSL >= 0.9.7
ECDSA			Santuario >= 1.7 and OpenSSL >= 0.9.8 (I think)
GCM			Santuario >= 1.7 and OpenSSL >= 1.0.1
RSA-OAEP 1.1		Santuario >= 1.7 and OpenSSL >= 0.9.7

ECDSA is also commonly missing from vendor builds of OpenSSL until
recently due to the patents around it. I believe Red Hat turned it on
finally because people are demanding new cipher suites in TLS for forward
secrecy that require ECDH and ephemeral keying, so it enables ECDSA as a
side effect.

>For OSJ-77, I was doing some testing around supported algorithms in Java.
> The quick summary is:  if you want support for AES-GCM and/or RSA OAEP
>1.1, you need either Java 8 or the Bouncy Castle provider.

I knew about GCM, I didn't realize they added OAEP 1.1 to Java 8 though.

-- Scott